2023

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.

Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values,

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buff

Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we presume that w

Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence

When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a t

Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox

An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1.

During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device t

An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, le

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to pat

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnera

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable t

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending

An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption pad

An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracero

Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Ser

Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentContro

Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControl

Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentCon

The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow atta

The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-si

OpenSIS Classic Community Edition version 9.0 lacks cross-site request forgery (CSRF) protection throughout the whole ap

An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows

The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a direc

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an inte

Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a smal

XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, a

wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Prior to ver

The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including

GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329.

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could al

in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservat

in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information or rewrite sensitive file t

IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect f

The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type vali

The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5

Dreamer_cms 4.1.3 is vulnerable to Cross Site Request Forgery (CSRF) via Add permissions to CSRF in Permission Managemen

git-urls 1.0.0 allows ReDOS (Regular Expression Denial of Service) in urls.go.

joaquimserafim/json-web-token is a javascript library use to interact with JSON Web Tokens (JWT) which are a compact URL

Directory Traversal vulnerability in TerraMaster v.s1.0 through v.2.295 allows a remote attacker to obtain sensitive inf

Honeywell ProWatch, 4.5, including all Service Pack versions, contain a Vulnerability in Application Server's executable

Liblisp through commit 4c65969 was discovered to contain a out-of-bounds-read vulnerability in unsigned get_length(lisp_

Adobe ColdFusion versions 2023.5 (and earlier) and 2021.11 (and earlier) are affected by an Improper Access Control vuln

Corebos 8.0 and below is vulnerable to CSV Injection. An attacker with low privileges can inject a malicious command int

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in a

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Dir

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could le

Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerabi